CVE-2020-17439

{"id": "CVE-2020-17439", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.7, "exploitabilityScore": 3.9}]}, "published": "2020-12-11T23:15:12.857", "references": [{"url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "https://www.kb.cert.org/vuls/id/815128", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that the incoming DNS replies match outgoing DNS queries in newdata() in resolv.c. Also, arbitrary DNS replies are parsed if there was any outgoing DNS query with a transaction ID that matches the transaction ID of an incoming reply. Provided that the default DNS cache is quite small (only four records) and that the transaction ID has a very limited set of values that is quite easy to guess, this can lead to DNS cache poisoning."}, {"lang": "es", "value": "Se detect\u00f3 un problema en uIP versi\u00f3n 1.0, como es usado en Contiki versi\u00f3n 3.0 y otros productos. El c\u00f3digo que analiza los paquetes DNS entrantes no comprueba que las respuestas DNS entrantes coincidan con las consultas DNS salientes en la funci\u00f3n newdata() en el archivo resolv.c. Adem\u00e1s, las respuestas DNS arbitrarias son analizadas si hubo alguna consulta DNS saliente con un ID de transacci\u00f3n que coincida con el ID de transacci\u00f3n de una respuesta entrante. Siempre que la cach\u00e9 de DNS predeterminada sea bastante peque\u00f1a (solo cuatro registros) y que el ID de transacci\u00f3n tenga un conjunto de valores muy limitado que sea bastante f\u00e1cil de adivinar, esto puede conllevar a un envenenamiento de la cach\u00e9 de DNS"}], "lastModified": "2020-12-15T15:36:04.430", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:uip_project:uip:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D64553E4-7D30-4706-8386-628363A3EC85"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:contiki-os:contiki:3.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DCF3DB31-D1C3-4110-8919-13452E797D81"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}